Privacy Policy
This Privacy Policy outlines how Nutrition AI ("we", "our", or "us") collects, uses, and protects your personal data when you use our progressive web app to receive customized nutrition plans. Our services are designed with your privacy in mind, and we are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable laws.
Data Controller Contact Information:
Evalest Ltd
1 Derwent Business Centre, Clarke Street, Derby, England, DE1 2BU
tech@evalest.com
Types of Data Collected:
- Personal identifiers from your Google login (e.g., name, email)
- Personal details (e.g., age, weight, height)
- Health information (e.g., allergies, known medical conditions)
- Payment information for service fees
Purpose and Legal Basis for Processing:
We process your data to provide personalized nutrition plans based on the information you provide. The legal basis for processing your personal data includes your explicit consent and the necessity of the data for the performance of our contract with you.
Data Recipients and Third-Party Processors:
We use third-party services such as Google Analytics for website analytics and the OpenAI API to generate your nutrition plans. We ensure that all third-party processors are compliant with GDPR and other privacy regulations.
Data Transfer and Storage:
Your data may be stored and processed within the EU or in countries that ensure an adequate level of data protection as determined by the European Commission.
Retention Period:
We retain your personal data only for as long as necessary to provide you with our services and as required by law.
Your Data Protection Rights:
Under GDPR, you have the right to access, rectify, erase, restrict processing, and object to processing of your personal data. You also have the right to data portability and to withdraw your consent at any time.
Automated Decision-Making and Profiling:
We do not use automated decision-making processes that would have a legal effect on you without human intervention.
Cookies and Tracking Technologies:
We use cookies and similar tracking technologies to track activity on our service and hold certain information.
Google Analytics:
We have taken steps to ensure that any data processing is lawful and transparent.
Security Measures:
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including but not limited to encryption, access controls, and security training for our staff.
Data Breach Notification:
In the event of a data breach, we will notify you and any applicable regulator when we are legally required to do so.
Changes to This Privacy Policy:
We may update our Privacy Policy from time to time, and we will notify you of any changes by posting the new Privacy Policy on this page.
For any questions or concerns regarding this Privacy Policy or our privacy practices, please contact us at tech@evalest.com.